CVE-2021-33700
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-33700
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. The attacker could so obtain highly sensitive information which the attacker could use to take substantial control of the vulnerable application.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用候选路径或通道进行的认证绕过
Source: NVD (National Vulnerability Database)
Vulnerability Title
SAP Business One 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SAP Business One是德国思爱普（SAP）公司的一套企业管理软件。该软件包括财务管理、运营管理和人力资源管理等功能。 SAP Business One 存在授权问题漏洞，该漏洞的存在是由于缺少关键功能的身份验证。远程用户可以绕过认证过程。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SAP SE | SAP Business One | < 10.0 | - |
II. Public POCs for CVE-2021-33700
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-33700
请登录查看更多情报信息。
- https://launchpad.support.sap.com/#/notes/3073325x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2021-33700
Same Patch Batch · SAP SE · 2021-09-15 · 13 CVEs total
| CVE-2021-33690 | SAP NetWeaver 代码问题漏洞 | |
| CVE-2021-33696 | SAP ERP 跨站脚本漏洞 | |
| CVE-2021-33692 | SAP ERP 路径遍历漏洞 | |
| CVE-2021-33695 | SAP ERP 信任管理问题漏洞 | |
| CVE-2021-33697 | SAP ERP 安全漏洞 | |
| CVE-2021-33693 | SAP ERP 代码注入漏洞 | |
| CVE-2021-33691 | SAP NetWeaver 跨站脚本漏洞 | |
| CVE-2021-33694 | SAP ERP 跨站脚本漏洞 | |
| CVE-2021-33705 | SAP Enterprise Portal 代码问题漏洞 | |
| CVE-2021-33698 | SAP Business One 代码问题漏洞 | |
| CVE-2021-33701 | SAP ERP SQL注入漏洞 | |
| CVE-2021-33704 | SAP Business One 安全漏洞 |
IV. Related Vulnerabilities
Same product: SAP Business One
Same vendor: SAP SE
- CVE-2025-42956
Multiple vulnerabilities in SAP NetWeaver Application Server - CVE-2023-36920
Clickjacking vulnerability in SAP Enable Now - CVE-2023-40307
Privileges Memory Corruption (Out-of-bound write) - CVE-2023-40306
URL Redirection vulnerability in SAP S/4HANA (Manage Catalog - CVE-2022-41208
SAP Financial Consolidation 跨站脚本漏洞
Same weakness: CWE-288
- CVE-2026-41308
Password Pusher: JSON API `/p.json` file upload alias bypass - CVE-2026-7458
User Verification by PickPlugins <= 2.0.46 - Unauthenticated - CVE-2026-7567
Temporary Login <= 1.0.0 - Authentication Bypass to Account - CVE-2026-40022
Apache Camel Platform HTTP Main: Authentication Bypass on No - CVE-2026-40630
SenseLive X3050 Authentication bypass using an alternate pat
V. Comments for CVE-2021-33700
No comments yet